You Have a Breach Playbook. Do You Have an AI-Failure Playbook?

The Brief

Ask any mature organization what happens in the first hour of a data breach and you’ll get a crisp answer: a named incident commander, a runbook, a comms plan, a legal escalation path. Years of muscle memory.

Now ask what happens when an AI system fails publicly — gives a customer dangerously wrong information, makes a discriminatory decision, leaks data through an agent, generates content that ends up in front of a journalist. In most organizations, the honest answer is: nobody knows. There’s no commander, no runbook, no clock.

That’s the gap. We built incident response for breaches because breaches felt inevitable. AI failures are now equally inevitable — and most organizations are treating them as surprises rather than scenarios. The difference between a contained incident and a reputational crisis is almost entirely whether you decided who does what before it happened.

The Number

Recall Issue #11: 80% of organizations have already experienced risky agent behavior. The failures are already happening. The only variable left is whether you’ve rehearsed the response — and right now, most haven’t written it down.

Source: McKinsey (2026 agent risk survey).

The Move

Draft a one-page AI incident response plan this week. Keep it to a single page on purpose — a plan no one can read in a crisis isn’t a plan. Five fields:

1. Trigger — what counts as an AI incident worth activating this for

2. Commander — the one named person who runs it

3. Containment — first action (often: take the system offline or to human-only)

4. Log — what gets captured, by whom, before anything is changed

5. Notify — who gets told, in what order: legal, leadership, affected customers, regulator

Then do one tabletop exercise against a plausible scenario. The first time you run the plan should not be the first time it’s real.

The Question

If your most customer-facing AI system failed badly at 9am tomorrow, how long until the right person knew — and would they know what to do, or just who to panic to?

Brian Diamond is a fractional Chief AI Officer and founder of BrianOnAI, an AI governance platform, and Onaro, an AI spend intelligence platform. The CAIO Brief publishes every week for executives navigating AI leadership in real time.

https://brianonai.com